Chained Quiz Plugin up to 1.3.4/1.3.5 on WordPress Cookie chained_completion_id resource injection

Summaryinfo

A vulnerability was found in Chained Quiz Plugin up to 1.3.4/1.3.5 on WordPress and classified as critical. Affected by this issue is some unknown functionality of the component Cookie Handler. Such manipulation of the argument chained_completion_id leads to resource injection. This vulnerability is documented as CVE-2025-10493. The attack can be executed remotely. Additionally, an exploit exists.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Chained Quiz Plugin up to 1.3.4/1.3.5 on WordPress. Affected by this issue is an unknown code of the component Cookie Handler. The manipulation of the argument chained_completion_id with an unknown input leads to a resource injection vulnerability. Using CWE to declare the problem leads to CWE-99. The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. Impacted is confidentiality, integrity, and availability. CVE summarizes:

The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in version 1.3.4 and below via the quiz submission and completion mechanisms due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to hijack and modify other users' quiz attempts by manipulating the chained_completion_id cookie value, allowing them to alter quiz answers, scores, and results of any user. The vulnerability was partially patched in versions 1.3.4 and 1.3.5.

The advisory is shared for download at wordfence.com. This vulnerability is handled as CVE-2025-10493. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details as well as a public exploit are known.

The exploit is available at exploit-db.com. It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Exploit-DB (52464) and EUVD (EUVD-2025-29846). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• WordPress Plugin

Name

• Chained Quiz Plugin

Version

• 1.3.0
• 1.3.1
• 1.3.2
• 1.3.3
• 1.3.4
• 1.3.5

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion